Domain Due Diligence
Report for 1password.com
Why we think so
1Password.com is a well-established password manager and leader in Extended Access Management. It attracts about 7.7 million visits monthly, mainly from the United States. The website uses reputable technology providers like Amazon and Google and features a strong technical setup with valid SSL and robust DNS records. The brand name 1PASSWORD is trademarked by AgileBits, Inc., a company based in Toronto, Canada. While 1Password itself is secure, there is an active phishing scam impersonating 1Password to target its users. Users should remain vigilant and follow official security guidance.
Risk Insights
Trusted Technology Stack
Strong Brand Protection
Active Phishing Threats
Contradictory Signals
While the domain and company are reputable, users face real risks from external phishing scams.
Signal A: High trust signals from ownership and tech stack
Signal B: Active phishing campaigns targeting users impersonating the brand
Category Scores
Red Flags & Warnings
-
Recent phishing campaigns have targeted 1Password users with fake breach alerts attempting to steal credentials.
🔎 Detailed Checks & Analysis
Domain traffic and geography
Domain traffic and geography
"Traffic patterns indicate normal direct and search traffic with low bounce rate."
Reason: Site receives millions of legitimate visits mainly from the US, showing valid user interest.
Technical infrastructure and SSL
Technical infrastructure and SSL
"Multiple secure and paid tools in use; DNS and SSL records are current and valid."
Reason: Strong technical setup using Amazon hosting, Google Analytics, and valid HTTPS certificate.
Trademark and brand verification
Trademark and brand verification
"Official ownership information confirmed by USPTO records."
Reason: Multiple live trademarks registered to AgileBits, Inc. confirm brand control over 1PASSWORD .
Blacklist and phishing status
Blacklist and phishing status
"No direct blacklist or phishing detection tied to the domain."
Reason: Domain not found on crypto scam or Google Safe Browsing blacklists.
Reputation and user reports
Reputation and user reports
"User complaints focus on phishing emails from external domains, not 1password.com itself."
Reason: No scam reports tied to domain; phishing attempts involve fake domains resembling 1Password.
Your Next Steps
-
1Do not click links or provide credentials in unsolicited emails claiming to be from 1Password.
-
2Confirm account status only through official 1password.com website or app.
-
3Enable phishing-resistant two-factor authentication and keep your Secret Key secure.
-
4Contact support@1password.com if you suspect compromise or need assistance.
-
5Stay informed about ongoing phishing attempts targeting 1Password users.
Evidence & Citations
-
1Password high-level site and traffic data
Traffic and engagement metrics indicate a well-used site
-
Site technologies and hosting providers for 1password.com
Uses reputable industry-standard technologies and services
-
Trademark search for 1PASSWORD by USPTO
Trademark status and ownership verified
-
Recent phishing attack impersonating 1Password users
Ongoing phishing risks from external actors
🕵🏻 Keep investigating
Run another instant due diligence scan on any website URL. Verify before you trust!
Instant approval funnels promise same-day cash once you upload sensitive IDs, then resell the data or charge bogus fees....
Read playbook →Webinars promise secret trading signals but quietly upsell unregistered brokers or payment wallets. ScamAI inspects regi...
Read playbook →